CVE-2005-2654
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
30/08/2005
Last modified:
03/04/2025
Description
phpldapadmin before 0.9.6c allows remote attackers to gain anonymous access to the LDAP server, even when disable_anon_bind is set, via an HTTP request to login.php with the anonymous_bind parameter set.
Impact
Base Score 2.0
7.50
Severity 2.0
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:phpldapadmin_project:phpldapadmin:*:*:*:*:*:*:*:* | 0.9.6c (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322423
- http://www.debian.org/security/2005/dsa-790
- http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=322423
- http://www.debian.org/security/2005/dsa-790
- http://www.gentoo.org/security/en/glsa/glsa-200509-04.xml